Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/4xANHD6Y-K3jXI6UoJ4ngX292Bw.roa
File: 4xANHD6Y-K3jXI6UoJ4ngX292Bw.roa (raw, json)
Hash identifier: SR+eSJvfyVoaMrFO+uW3wC1Oz/meGcZseef5cWzluyk=
Subject key identifier: E3:10:0D:1C:3E:98:F8:AD:E3:5C:8E:94:A0:9E:27:81:7D:BD:D8:1C
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 01997A62420A13E17B8F3F76089E0B5C2247
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/4xANHD6Y-K3jXI6UoJ4ngX292Bw.roa
Signing time: Wed 24 Sep 2025 06:21:23 +0000
ROA not before: Wed 24 Sep 2025 06:21:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42697
IP address blocks: 77.243.48.0/20 maxlen: 20
77.243.62.0/23 maxlen: 23
109.200.64.0/20 maxlen: 20
185.29.77.0/24 maxlen: 24
185.29.78.0/23 maxlen: 23
2a03:dc80::/29 maxlen: 32
2a03:dc82::/32 maxlen: 32
2a03:dc84::/32 maxlen: 32
2a03:dc86::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:62:42:0a:13:e1:7b:8f:3f:76:08:9e:0b:5c:22:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Sep 24 06:21:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3100d1c3e98f8ade35c8e94a09e27817dbdd81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:87:fd:3c:cb:b1:58:32:3b:ae:3a:5f:76:
82:ff:d3:fc:9d:94:e0:0b:e6:94:4e:41:72:fa:bb:
26:e4:a3:ec:7b:97:5d:39:a3:e1:64:e7:09:bf:25:
30:f8:ce:57:b9:a7:36:8a:c1:fb:34:a4:45:e5:f1:
89:8a:ec:82:e9:c0:06:33:78:2f:0f:0a:1d:22:ad:
74:65:8f:65:87:2b:3d:72:49:aa:1e:a2:86:fb:ba:
5e:0b:b3:38:85:14:67:e2:50:1f:42:4b:1e:04:1d:
31:0f:9f:b3:37:52:47:b7:5f:ad:68:19:78:67:1c:
55:5f:ae:da:27:24:83:99:ca:cf:10:aa:40:a9:63:
15:bb:5b:8c:bc:f0:07:d1:7d:56:aa:49:28:72:ca:
fe:76:83:02:b2:8f:a1:e6:32:b6:9f:7c:b0:0c:8b:
e9:82:9a:ad:8d:17:3e:d6:f0:cf:e9:d1:d1:88:32:
f3:0a:19:0e:5e:c4:df:8b:04:b0:02:94:70:f3:6b:
88:a2:a2:3b:0c:62:7d:49:a3:e1:d5:28:de:75:48:
f8:e4:4d:4c:71:c7:5c:2e:c0:66:cf:2d:f5:a4:59:
db:a4:3e:c2:b0:5c:7f:8a:78:d7:70:80:95:af:d5:
f4:a6:43:94:a7:2d:af:e3:80:b4:2a:67:f8:6e:ab:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:10:0D:1C:3E:98:F8:AD:E3:5C:8E:94:A0:9E:27:81:7D:BD:D8:1C
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/4xANHD6Y-K3jXI6UoJ4ngX292Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.48.0/20
109.200.64.0/20
185.29.77.0-185.29.79.255
IPv6:
2a03:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
3b:0f:aa:ca:52:28:9a:f9:fd:f2:21:c3:bd:6a:cb:aa:1f:fb:
c9:b0:67:4a:4a:02:4a:48:9c:cd:e5:19:11:26:d5:ca:3b:f2:
f5:0c:41:7a:ae:94:5f:cc:e9:18:b1:36:aa:69:39:aa:bb:2a:
94:e7:28:f5:64:07:ed:3e:c7:22:08:51:9f:ec:e2:49:f0:fb:
17:dd:10:ce:fc:e7:e6:a3:25:3f:10:f9:d8:8c:c0:ac:b3:6f:
b0:ff:38:d7:15:fe:e0:48:3e:a8:d7:d1:24:73:3b:5f:40:f1:
c4:50:22:d2:fa:0c:b6:57:1c:af:a2:b1:a7:7a:03:97:a1:b3:
55:05:be:4d:6e:d2:37:d8:84:42:5c:c3:1c:dc:48:bd:d7:5c:
10:40:eb:74:1f:74:ef:d5:ae:22:05:fb:ef:a5:27:34:9d:2d:
1f:a8:51:e4:26:bf:43:b7:52:fd:c3:43:69:e0:bd:a6:59:8e:
29:6d:6f:71:1a:2e:c2:c5:5c:07:31:e7:9a:e6:9a:1e:6f:92:
38:65:fa:92:7f:47:e0:56:16:fe:da:64:c8:9d:ac:a0:b1:c8:
0b:4e:25:24:20:49:bd:0b:87:f0:c4:63:0a:6f:2e:5e:3a:94:
ae:85:59:a7:7d:93:9a:aa:e3:99:be:d2:0b:93:19:ca:cf:08:
29:e1:7d:94
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZl6YkIKE+F7jz92CJ4LXCJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTA5NzBkZGJiNzYxOWNjODIxODZkZGI1MzZlYjRlODk4
NWQyZGUwHhcNMjUwOTI0MDYyMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzEwMGQxYzNlOThmOGFkZTM1YzhlOTRhMDllMjc4MTdkYmRkODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AaH/TzLsVgyO646X3aC/9P8nZTg
C+aUTkFy+rsm5KPse5ddOaPhZOcJvyUw+M5Xuac2isH7NKRF5fGJiuyC6cAGM3gv
DwodIq10ZY9lhys9ckmqHqKG+7peC7M4hRRn4lAfQkseBB0xD5+zN1JHt1+taBl4
ZxxVX67aJySDmcrPEKpAqWMVu1uMvPAH0X1Wqkkocsr+doMCso+h5jK2n3ywDIvp
gpqtjRc+1vDP6dHRiDLzChkOXsTfiwSwApRw82uIoqI7DGJ9SaPh1SjedUj45E1M
ccdcLsBmzy31pFnbpD7CsFx/injXcICVr9X0pkOUpy2v44C0Kmf4bqvhgwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFOMQDRw+mPit41yOlKCeJ4F9vdgcMB8GA1UdIwQY
MBaAFBaQlw3bt2GcyCGG3bU2606JhdLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUt
Y2MwM2JkMzE1ZmY5LzEvNHhBTkhENlktSzNqWEk2VW9KNG5nWDI5MkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUtY2MwM2JkMzE1ZmY5
LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQETfMwAwQE
bchAMAwDBAC5HU0DBAS5HUAwDQQCAAIwBwMFAyoD3IAwDQYJKoZIhvcNAQELBQAD
ggEBADsPqspSKJr5/fIhw71qy6of+8mwZ0pKAkpInM3lGREm1co78vUMQXqulF/M
6RixNqppOaq7KpTnKPVkB+0+xyIIUZ/s4knw+xfdEM785+ajJT8Q+diMwKyzb7D/
ONcV/uBIPqjX0SRzO19A8cRQItL6DLZXHK+isad6A5ehs1UFvk1u0jfYhEJcwxzc
SL3XXBBA63QfdO/VriIF+++lJzSdLR+oUeQmv0O3Uv3DQ2ngvaZZjiltb3EaLsLF
XAcx55rmmh5vkjhl+pJ/R+BWFv7aZMidrKCxyAtOJSQgSb0Lh/DEYwpvLl46lK6F
Wad9k5qq45m+0guTGcrPCCnhfZQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:01 2025 by rpki-client